e0a99c0330a2d7920a60fc1d02d931a0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

e0a99c0330a2d7920a60fc1d02d931a0_NeikiAnalytics
Size

48KB
MD5

e0a99c0330a2d7920a60fc1d02d931a0
SHA1

fdb7ca7bfe311dda8aa666c356a8671662772ff5
SHA256

14faeb0cebba1075c844fd56f59507fe707467159aeda0d9206ad92286383b4b
SHA512

595a2ab3b0195971fdab54946e4d9802b01accf9439bea1c7e00f6336504b1480a2d8d65632a5fae4f2b31f44b99f459926a9237f68076f87ee8c1a3f8907c0d
SSDEEP

768:kZbx+0hxO9alwI/ACX46Y0hxua/Sq3YyeT3XCXm:kZb/lrdLhrY3SX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0a99c0330a2d7920a60fc1d02d931a0_NeikiAnalytics

Files

e0a99c0330a2d7920a60fc1d02d931a0_NeikiAnalytics
.dll windows:4 windows x86 arch:x86

6f709c8c93becb89de7387d8cde7bda5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
GetLastError
MulDiv
GetProcAddress
GlobalSize
LoadLibraryA
ReadFile
FreeLibrary
CloseHandle
GetFileSize
WriteFile
SetFilePointer
CreateFileA
CreateFileW

user32

GetDlgItem
LoadStringA
wsprintfA
GetDlgItemTextA
EndDialog
SetDlgItemTextA
SetDlgItemInt
ShowWindow
SendDlgItemMessageA
DialogBoxParamA
GetDlgItemInt
CloseClipboard
wvsprintfA
wvsprintfW
SetWindowTextA
SetClipboardData
EmptyClipboard
MessageBoxA
OpenClipboard
FillRect
EnableWindow
GetFocus
SendMessageA
GetWindowTextA

gdi32

MoveToEx
GetTextMetricsA
DeleteDC
SetROP2
CreateDCA
SetDIBits
CreateCompatibleBitmap
SelectObject
CreateBitmap
DeleteObject
GetObjectA
BitBlt
CreateCompatibleDC
LineTo
CreateFontA
CreateHatchBrush
TextOutA
Rectangle
FloodFill

djp

JpgRot
JpgRot1
JpgStamp

djpalign

AlignedJpg2Dib
AlignedJpgRot
AlignedJpgRot1

mcppl

WPPInt
IsNumeric
GPPStr
Quote
DelTree
ErrorMsg
VersionMatch
GPPInt
GetTextExtent
IsDirectory
DefaultDlg
ErrorMessage
WPPStr

msvcrt

sprintf
_mkdir
remove
atoi
strcat
atol
rename
fopen
fseek
atof
fwrite
_adjust_fdiv
malloc
_initterm
free
strcmp
strcpy
atan
_ftol
strlen
fclose
fread
fabs

Exports

Exports

?ExpandIndex@@YAJPAD0@Z
OutputFormatAppClose
OutputFormatAppOpen
OutputFormatAppSetup
OutputFormatBtcValidate
OutputFormatDescription
OutputFormatDisplay
OutputFormatLabel
OutputFormatMode
OutputFormatProcess
OutputFormatVersion

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f709c8c93becb89de7387d8cde7bda5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

djp

djpalign

mcppl

msvcrt

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 14KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 14KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 2KB